Learning Objectives: - Learn how key features of AWS IoT Device Management work including remote management of devices, fine-grained device logging, fleet indexing and search, and fast onboarding of devices in bulk - See how AWS IoT Device Management works with AWS Greengrass - Understand how to get started with AWS IoT Device Management using the AWS Console

1. © 2018, Amazon.com Services, Inc. or its Affiliates. All rights reserved.
Name
Andrew Kiggins – SDM
AWS IoT Device
Management

2. © 2018, Amazon.com Services, Inc. or its Affiliates. All rights reserved.
Predictive
maintenance
Wellness &
health solutions
Connected buildings
& city systems
Maintain
device fleets
Monitor energy
efficiency
Safeguard manufacturing
facilities
What customers are doing with AWS IoT
IoT payment &
connected commerce
Remote patient
monitor

3. Intelligence
Insights & Logic → Action
AWS IoT Services Suite
Sense & Act
Things
Secure device
connectivity
and messaging
AWS IoT Core
Fleet onboarding,
management and
SW updates
Fleet
audit and
protection
IoT data
analytics and
intelligence
AWS IoT Device
Management
AWS IoT Device
Defender
GatewayEndpoints
AWS Greengrass
AWS IoT 1-Click
AWS IoT
Analytics
Amazon
FreeRTOS
Storage & Compute & Learn
Cloud
Secure local
triggers, actions,
and data sync

4. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
How can I manage my growing number of
connected devices?

5. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Fast device
onboarding at scale
Real-time fleet
indexing and search
Monitoring and
updating devices
AWS IoT Device Management
Device Management Service
AWS IoT Device Management helps you onboard, organize, monitor,
and remotely manage your growing number of connected devices.

6. © 2018, Amazon.com Services, Inc. or its Affiliates. All rights reserved.
Batch Fleet
Provisioning
Real-time
Fleet Index & Search
Fine Grained
Device Logging
& Monitoring
Over the
Air Updates
Maintain Fleet Health
AWS IoT Device Management

7. © 2018, Amazon.com Services, Inc. or its Affiliates. All rights reserved.
Onboarding
AWS IoT Device Management

8. © 2018, Amazon.com Services, Inc. or its Affiliates. All rights reserved.
Batch Fleet Provisioning
• Provides provisioning workflows to register
device information such as metadata,
certificates, and policies for the entire fleet
• JSON template with parameters to define
IoT resources (things, certificates, policies)
that represent device in the cloud.
• Upload via console or call
StartThingRegistrationTask API for
registering all devices in bulk
• Track provisioning progress, or download
reports for completed tasks
• Can be used for provisioning new devices or
re-registering devices (e.g. rotating
certificates)
"Parameters" : {
"ThingName" : { "Type" : "String" },
"SerialNumber" : { "Type" : "String" },
"Location" : { "Type" : "String",
"Default" : "WA“ },
"CSR" : { "Type" : "String“ }
}
"Resources" : {
"thing" : {
"Type" : "AWS::IoT::Thing",
"Properties" : {
"ThingName" : {"Ref" : "ThingName"},
"AttributePayload" : {
"version" : "v1",
"serialNumber" : {"Ref" : "SerialNumber"}
},
"ThingTypeName" : "lightBulb-versionA",
"ThingGroups" : ["v1-lightbulbs", {"Ref" : "Location"}]
}
},
"certificate" : { "Type" : "AWS::IoT::Certificate", "Properties" : {
"CertificateSigningRequest": {"Ref" : "CSR"}, "Status" : "ACTIVE" }
}

9. © 2018, Amazon.com Services, Inc. or its Affiliates. All rights reserved.
Organizing
AWS IoT Device Management

10. © 2018, Amazon.com Services, Inc. or its Affiliates. All rights reserved.
Grouping and Searching for Devices
Organize
devices into
logical
hierarchies
Search both the
Registry and
Device Shadow
Group Policies

11. © 2018, Amazon.com Services, Inc. or its Affiliates. All rights reserved.
Thing Groups

12. © 2018, Amazon.com Services, Inc. or its Affiliates. All rights reserved.
Location
{
"Version": "2012-10-17",
"Statement": {
"Effect": "Allow",
"Action":["iot:Subscribe"],
"Resource": ["arn:aws:iot:us-east-1:123456789012:topic/lightbulb/admin"]
}
}
RoomN
{
"Version": "2012-10-17",
"Statement": {
"Effect": "Allow",
"Action":["iot:Publish"],
"Resource": ["arn:aws:iot:us-east-1:123456789012:topic/lights/roomN/status"]
}
}
Light bulb – Effective policy
{
"Version": "2012-10-17",
"Statement": {
"Effect": "Allow",
"Action":["iot:Subscribe"],
"Resource": ["arn:aws:iot:us-east-1:123456789012:topic/lightbulb/admin"]
},
{
"Effect": "Allow",
"Action":["iot:Publish"],
"Resource": ["arn:aws:iot:us-east-1:123456789012:topic/lights/${iot:ClientId}/status"]
},
{
"Effect": "Allow",
"Action":["iot:Publish"],
"Resource": ["arn:aws:iot:us-east-1:123456789012:topic/lights/roomN/status"]
}]
}
Guest Rooms
{
"Version": "2012-10-17",
"Statement": {
"Effect": "Allow",
"Action":["iot:Publish"],
"Resource": ["arn:aws:iot:us-east-1:123456789012:topic/lights/${iot:ClientId}/status"]
}
}
Thing Groups - Effective Policies

13. © 2018, Amazon.com Services, Inc. or its Affiliates. All rights reserved.
Search both Registry and Device Shadow

14. © 2018, Amazon.com Services, Inc. or its Affiliates. All rights reserved.
Over the Air Updates
AWS IoT Device Management

15. © 2018, Amazon.com Services, Inc. or its Affiliates. All rights reserved.
Jobs – Control + Monitoring

16. © 2018, Amazon.com Services, Inc. or its Affiliates. All rights reserved.
Job Workflow using AWS IoT Device Management
subscribe $aws/things/MyThing/jobs/notify
Call DescribeJobExecution API
Execute
Call UpdateJobExecution API
Job document
AWS cloud
AWS IoT
(Continued)
notify topic
accepted topic
rejected topic

17. © 2018, Amazon.com Services, Inc. or its Affiliates. All rights reserved.
Over-the-Air Updates with
Amazon FreeRTOS
Beta
• Stream updates to your device
over MQTT
• Validate signature on device
• APIs to control installation and
reboot logic
• Code sign new firmware images
• Control authorship and ensure
devices only run trusted code
• Memory efficient updated client

18. © 2018, Amazon.com Services, Inc. or its Affiliates. All rights reserved.
Monitoring
AWS IoT Device Management

19. © 2018, Amazon.com Services, Inc. or its Affiliates. All rights reserved.
Monitoring Device Events
Monitor Devices
Joining Groups
Monitoring of
Device Updates
Monitor Device
Security Policies

20. © 2018, Amazon.com Services, Inc. or its Affiliates. All rights reserved.
Fine-grained Logging

21. © 2018, Amazon.com Services, Inc. or its Affiliates. All rights reserved.
AWS IoT Device Management
1. Fast device
onboarding at scale
2. Real-time fleet
indexing and search
3. Over the air updates

22. © 2018, Amazon.com Services, Inc. or its Affiliates. All rights reserved.
THANK YOU!
Contact us at: aws-iot-dm-info@amazon.com